Luigi Auriemma

I'm a big fan of this aging game, and keep a public server going even though most players moved on to the newer games. Unfortunatly dealing with cheaters and exploiters has become increasingly difficult. lol.

I was able to patch (with your tools) for the codmsgboom. Worked great. Now I would like to patch for the q3msgboom version which also works on cod and seems to be the more popular method.

In your advisories, you did state that a "universal" binary patch was not possible. I would however, still like to ask if there is a way for cod dll to be patched via binary, instead of modding the exe. Modding the exe would remove the vsay command alltogether, correct? I dont think normal players would like that removed and I dont have enough knowledge to modify the game sourcecode, as you also suggested as the true fix.

Thanks in advance for your help, Keith.

As far as I know the bug is just the same, in fact if you patch codmsgboom the other one will be no longer active (the attacker's client will be disconnected if he tries to exploit the bug).

Are you 100% sure it's just q3msboom which is exploited?

Hello,

Same for my server.

when i try codmsgboom,cfg nothing happens. it only show aaaaaaaaaaaaaaaaaaaaaaaaaaa in chat. so its patched fine.

BUT when i try q3msgboom the server crashes.

HELP ME PLZ!

uhmmm in this case probably it's good to remove the vsay command from the server.
at the moment I no longer remember all the various problems in CoD generated by q3msgboom (it's passed a lot of time and the q3 engine is used by so much games that for me is impossible to remember all the effects for each one of them) and in this moment I can't do additional tests on this specific game, so try to disable the vsay* commands (used by q3msgboom) and check if something changes:

http://aluigi.org/patches/q3lamefix.txt

if this works try also to substituite the vsay in q3msgboom.cfg with other commands like "tell" and check the effects on the server and (if you can) also on the clients since is possible that the server doesn't crash but the clients get disconnected

doesnt cod use punkbuster? how come PB hasn't fixed it, thats there job to do so.

CoD uses Punkbuster but Evenbalance can't fix the engine bugs.
The only time I saw Punkbuster making a work-around for a game bug was with the format string in Doom 3 and probably they did something also with America's Army and FEAR since the vulnerabilities I found were in these games/engines but they were exploitable through punkbuster.

then what the hell does pb do lol
just stop aimbot, wallhack and esp?
thats lame, i'd rather have my server be fixed from being crashed than users using wallhack/aimbot/esp.

PB is an anti-cheating software so it's main job is to scan remote clients and kicking/banning them from the server

probably the servers on which you played had PB not active

FEAR is a classical client-server game so Punkbuster is available for download for both the parts so clients are obbligated to scan their own memory and servers can kick/ban them depending to what the PB client reports and so on.

Warrock is a MMORPG so the PB server component is not available for download becaure there is no a server for users but only the centralized one.